$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac84911-08f7-315c-bca4-a72a1c477873.roa File: 3ac84911-08f7-315c-bca4-a72a1c477873.roa (raw, json) Hash identifier: 1QVSNDrx2fGdF5YOvqLqqihgRUc3WoKSsjOYhUhHjig= Subject key identifier: 50:CD:9C:88:1D:6E:D9:35:18:A4:8B:E7:CE:19:53:3D:2F:4D:6C:1F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1AD19D576867AED814D14B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac84911-08f7-315c-bca4-a72a1c477873.roa Signing time: Sat 06 Sep 2025 13:00:41 +0000 ROA not before: Sat 06 Sep 2025 13:00:41 +0000 ROA not after: Fri 05 Dec 2025 14:00:41 +0000 asID: 16625 IP address blocks: 23.39.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:d1:9d:57:68:67:ae:d8:14:d1:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 6 13:00:41 2025 GMT Not After : Dec 5 14:00:41 2025 GMT Subject: CN=3198ded3-6c9e-45ab-8c2c-daea06235d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f6:94:c7:4b:b0:db:13:b2:0b:69:bb:c3:22: d9:49:aa:4c:0b:dd:31:4e:3e:23:da:70:a4:3c:f0: a8:e6:65:c6:5f:19:1c:57:a0:4c:c1:12:8a:c6:2e: 47:d1:de:0f:0c:36:ec:3b:94:5d:ef:71:64:3c:6a: 87:3b:e0:3b:14:31:fd:4c:3b:17:57:01:ff:38:c9: de:bf:85:71:23:50:14:5e:21:65:80:89:46:bf:c3: c1:12:0e:29:a9:1f:1b:be:a2:9c:7b:99:00:65:72: ff:13:7e:c5:58:4a:61:99:75:18:41:54:55:08:4e: 9e:e3:ba:12:82:37:eb:65:cf:dd:70:96:9c:3e:f1: 31:fe:21:56:2b:66:78:ad:c8:2d:a1:66:b0:b6:28: 83:33:37:20:98:da:59:9c:da:dc:cb:84:05:4b:e2: 2c:82:65:94:06:77:3e:bf:a3:1d:69:00:f0:fb:04: 2c:eb:cf:6b:c5:6c:6d:c1:4f:83:36:7b:81:59:73: 77:a5:17:1b:db:a0:4b:61:11:11:83:e9:6d:d0:8b: ab:44:f7:fa:16:f5:21:ca:da:a2:47:f9:31:b5:b6: 4e:d8:0d:96:f3:28:e5:51:63:3b:da:7c:ea:f8:22: 38:e5:37:28:5b:55:4d:73:de:2c:5a:69:ad:8b:fc: 53:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:CD:9C:88:1D:6E:D9:35:18:A4:8B:E7:CE:19:53:3D:2F:4D:6C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ac84911-08f7-315c-bca4-a72a1c477873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.39.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f2:4f:76:c1:74:77:1e:20:67:af:d0:12:da:b1:7a:f2:70: 64:3c:3e:de:be:20:87:14:09:a0:0e:1c:47:38:ec:de:97:59: 70:1b:a3:b4:66:6e:af:e1:70:ff:d6:15:8f:ab:96:70:83:d9: 5f:3d:6b:a9:41:5d:00:40:2e:37:3b:72:20:f1:77:79:db:a4: 39:ca:13:35:21:0f:bd:98:79:f8:c6:8b:38:2b:7c:9e:4a:01: f7:73:24:eb:4f:41:31:a9:df:4b:12:c8:81:03:c8:7c:6f:7d: ca:b7:c8:5d:5c:65:b2:59:9c:5a:39:65:46:9d:db:f8:db:61: 18:ea:ba:d0:c6:8d:75:79:86:5c:b2:63:d9:b4:42:89:b9:6f: 7a:d7:1e:f6:27:28:4f:44:92:41:94:3b:cc:b6:58:d1:62:30: 8d:4e:4a:fc:1d:2a:fe:b5:53:7a:c0:ef:68:89:8b:05:88:6c: f7:64:df:32:c4:38:7f:04:69:2a:a8:51:54:67:df:b4:8f:8a: 8d:e6:f5:0f:1b:2d:51:bd:c3:f9:a7:3e:5d:ec:ec:e2:d4:f4: dc:44:59:a7:3f:07:ce:85:ea:b3:1e:38:80:93:4a:60:04:c2: 63:fa:89:2e:f3:c8:2d:91:db:04:bd:db:fb:59:70:a5:9b:fe: 54:49:a8:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsa0Z1XaGeu2BTRS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNjEzMDA0MVoXDTI1MTIwNTE0MDA0MVowLzEtMCsGA1UEAxMk MzE5OGRlZDMtNmM5ZS00NWFiLThjMmMtZGFlYTA2MjM1ZDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPaUx0uw2xOyC2m7wyLZSapMC90xTj4j2nCk PPCo5mXGXxkcV6BMwRKKxi5H0d4PDDbsO5Rd73FkPGqHO+A7FDH9TDsXVwH/OMne v4VxI1AUXiFlgIlGv8PBEg4pqR8bvqKce5kAZXL/E37FWEphmXUYQVRVCE6e47oS gjfrZc/dcJacPvEx/iFWK2Z4rcgtoWawtiiDMzcgmNpZnNrcy4QFS+IsgmWUBnc+ v6MdaQDw+wQs689rxWxtwU+DNnuBWXN3pRcb26BLYRERg+lt0IurRPf6FvUhytqi R/kxtbZO2A2W8yjlUWM72nzq+CI45TcoW1VNc94sWmmti/xTXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDNnIgdbtk1GKSL584ZUz0vTWwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2FjODQ5MTEtMDhmNy0z MTVjLWJjYTQtYTcyYTFjNDc3ODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFycAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3yT3bBdHceIGev0BLasXrycGQ8Pt6+IIcUCaAOHEc47N6XWXAbo7Rm bq/hcP/WFY+rlnCD2V89a6lBXQBALjc7ciDxd3nbpDnKEzUhD72YefjGizgrfJ5K AfdzJOtPQTGp30sSyIEDyHxvfcq3yF1cZbJZnFo5ZUad2/jbYRjqutDGjXV5hlyy Y9m0Qom5b3rXHvYnKE9EkkGUO8y2WNFiMI1OSvwdKv61U3rA72iJiwWIbPdk3zLE OH8EaSqoUVRn37SPio3m9Q8bLVG9w/mnPl3s7OLU9NxEWac/B86F6rMeOICTSmAE wmP6iS7zyC2R2wS92/tZcKWb/lRJqMQ= -----END CERTIFICATE-----Generated at Mon Oct 20 09:54:30 2025 by rpki-client